Your AI Policy Won’t Save You
September 2, 2026
AI governance is where most companies are getting it wrong. It’s not that they lack policies, but because they don’t understand what can actually go wrong with the technology they’re deploying. In this episode of Trust Issues, hosts Jeremy Patterson and Bruno Lecoq step away from their usual CMMC focus to sit down with Dallas Bishoff, President of Process 360 and a sitting member of the ISO committees writing the rules for AI, auditing, and emerging technologies.
AI governance is where most companies are getting it wrong. It’s not that they lack policies, but because they don’t understand what can actually go wrong with the technology they’re deploying. In this episode of Trust Issues, hosts Jeremy Patterson and Bruno Lecoq step away from their usual CMMC focus to sit down with Dallas Bishoff, President of Process 360 and a sitting member of the ISO committees writing the rules for AI, auditing, and emerging technologies.
What You’ll Learn:
- ISO 42001: the world’s first AI management system standard
- Why a policy document alone won’t survive an audit or a regulator
- The different flavors of AI (predictive, generative, agentic) and why each carries different risks
- The identity and permissions problem lurking inside agentic AI
- How the same AI tool can be low-risk in one department and a lawsuit waiting to happen in another
Episode chapters:
- 00:00 Episode Intro
- 00:46 Welcome to Trust Issues
- 03:26 Why History Repeats Itself in AI
- 07:29 Securing the Environment Before Deploying AI
- 10:18 Who Actually Owns AI Governance?
- 15:06 The Shadow AI Problem
- 17:51 Policy vs. Real System: What Passes an Audit
- 20:12 Internal Use vs. Building AI Into Your Product
- 23:27 The Coming 50-State AI Regulation Mess
- 26:09 Same Tool, Different Risk
- 31:02 The Legal Concept Coming for AI
- 33:18 Hallucinations, Guardrails, and the TaskRabbit Story
- 37:29 Making Decisions Without All the Answers
- 40:07 Where Can You Find Dallas?
Quotes:
- “AI is a very different animal in contrast to how a lot of other organizations have sort of operated, but history tends to repeat itself.”
- “If you want to avoid many of the challenges and stuff that you're gonna run into with AI, and if you wanna understand how to govern AI, you've got to develop an understanding of basically what can go wrong with it, and what your opportunities are.”
- “The number one first step in problem solving is awareness. And quite frankly, a number of organizations simply are not aware of what's happening on their networks because if all you've got are policy documents, you're so far in trouble in ways that you have no idea about.”
- “There are certain things that are that we absolutely will not use AI for right now that I'm not comfortable with doing. But if you don't understand what can go wrong, you're not gonna be able to protect yourself.”
- “You need a small matrix team of executives who basically can provide proper oversight and control and are accountable inside the organization.”
Connect with the team:
Trust Issues is handcrafted by our friends over at: fame.so